FFFF kabi-ctr (Kabir Poudel) · GitHub
[go: up one dir, main page]

Skip to content
View kabi-ctr's full-sized avatar

Block or report kabi-ctr

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
kabi-ctr/README.md

Kabir Poudel

Computer Engineering graduate and M.Sc. student in AI and Data Engineering (University of Vaasa). Solid SQL and Linux foundation, hands-on experience parsing and analysing large volumes of log data, and a methodical, detail-oriented way of tracing problems to their cause.

LinkedIn · Email · English (C1) · Finnish (A2) · Nepali (native)

Open to: junior, intern/trainee and part-time roles in security operations, application security, data engineering, or test & verification. Finland (on-site or hybrid) or remote within the EU.


Projects

train_punctuality_elt: ELT pipeline for Finnish train punctuality

  • Extracts every train run in Finland from the Digitraffic open API each day, lands the raw JSON, loads it into DuckDB and models punctuality marts in dbt.
  • Incremental fact tables, idempotent partition loads, 45 dbt data tests, a dbt unit test and an end-to-end test on recorded API data.
  • Runs every morning in GitHub Actions and publishes a punctuality report (about 1,800 train runs and 71,000 timetable rows per day).
  • Python · SQL · DuckDB · dbt · GitHub Actions · Parquet

log_analyzer: Python CLI for OpenSSH authentication logs

  • Parses sshd login events and flags any IP with N failed logins inside a sliding time window. The rule is set in YAML (default: 5 failures in 10 minutes).
  • Writes a Markdown report with suggested nftables / iptables block rules. Nothing is executed automatically.
  • pandas · pytest unit tests · ruff lint · GitHub Actions CI on every push

security_analyst_training: SOC lab cases, written up as analyst reports

  • Phishing IOC analysis (LetsDefend SOC282): detonated the attachment in ANY.RUN, checked hashes and domains in VirusTotal, extracted hashes, IPs and domains for blocking.
  • Phishing incident report (LetsDefend SOC146) and an incident response playbook.
  • Spam text classifier: TF-IDF features; compared logistic regression, naive Bayes, SVM and a decision tree on the SMS Spam Collection (5,572 messages). Naive Bayes reached 97.3% accuracy.
  • Notes on MITRE ATT&CK, networking and Linux.

Not on GitHub

  • Online Garage Searching System (Flutter, Firebase): finds the three nearest garages for the user's location and vehicle problem, using GPS, Google Maps and the Haversine formula.
  • Regulated DC power supply (IOE electronics lab): bridge rectifier, capacitor filter and Zener regulator. Verified output voltage, load regulation and ripple with an oscilloscope and multimeter; troubleshot faults stage by stage.

Thesis (in progress)

Machine-learning-based test case prioritization for continuous integration.

Experience

Security Researcher, Incybrix Security, Nepal · Aug 2024 – Jan 2025 · full-time

  • Security assessments and penetration tests on web applications and APIs; each finding documented with evidence.
  • Python scripts to automate security operations tasks.
  • Worked with development teams to build security controls into the software development lifecycle.

Cyber Security Researcher (Intern), Eminence Ways, Nepal · Dec 2023 – Mar 2024

  • Vulnerability assessment and penetration testing (VAPT) for enterprise clients across web apps, mobile apps and network infrastructure.
  • Technical reports with risk ratings and corrective-action recommendations.

Education

  • MSc, AI & Data Engineering, University of Vaasa, Finland · 2025 – 2027 (expected) Coursework includes applied machine learning, computer vision, data governance, advanced data architecture and system integration. Project management case study with Wapice Ltd (Agile/Scrum, ISO-aligned quality management).
  • B.E., Computer Engineering, Tribhuvan University (IOE), Nepal · 2019 – 2024 Analog and digital circuit, digital logic and microprocessor labs.

Certifications

  • Certified AppSec Practitioner (CAP), The SecOps Group, 2024
  • Coursework: Security Operations Center in Practice (IBM, 2025) · Introduction to Cybersecurity Tools & Cyber Attacks (IBM) · Linux Fundamentals for Security Practitioners (Cybrary) · Python for Everybody (Coursera, 2022)

Tools

  • Security: Burp Suite, Nmap, Wireshark, OWASP Top 10, MITRE ATT&CK, VirusTotal, ANY.RUN
  • Code & testing: Python, SQL, pandas, scikit-learn, Jupyter, pytest, ruff, GitHub Actions
  • Data: DuckDB, dbt, Parquet
  • Platforms: Linux, Git, Flutter/Dart, Firebase
  • Lab equipment: oscilloscope, digital multimeter, function generator, bench DC power supply

Pinned Loading

  1. log_analyzer log_analyzer Public

    Python CLI that detects SSH brute-force attempts in OpenSSH auth logs and suggests firewall rules. pandas, pytest, GitHub Actions CI.

    Python

  2. security_analyst_training security_analyst_training Public

    SOC lab cases: phishing IOC analysis (ANY.RUN, VirusTotal), incident reports, IR playbook, MITRE ATT&CK notes, ML text classifier.

    Jupyter Notebook

  3. train_punctuality_elt train_punctuality_elt Public

    ELT pipeline for Finnish train punctuality: Digitraffic API -> DuckDB -> dbt marts, tested and scheduled in GitHub Actions.

    Python

0